Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.cer
File:                     DFAD4430E103F584B4F38EA4C2E1788C436A9021.cer (raw, json)
Hash identifier:          pjE8NtB+57hcu/kYFQLao1G1fr7E95QIzlD0xR36arI=
Subject key identifier:   DF:AD:44:30:E1:03:F5:84:B4:F3:8E:A4:C2:E1:78:8C:43:6A:90:21
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2E9E946ED663471EDF9EFFBEB3CCD43C518508AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.mft
caRepository:             rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 20:55:14 +0000
Certificate not after:    Thu 05 Mar 2026 21:00:14 +0000
Subordinate resources:    AS: 269438
                          IP: 45.184.4.0/22
                          IP: 2804:64a8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:9e:94:6e:d6:63:47:1e:df:9e:ff:be:b3:cc:d4:3c:51:85:08:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 20:55:14 2025 GMT
            Not After : Mar  5 21:00:14 2026 GMT
        Subject: CN=DFAD4430E103F584B4F38EA4C2E1788C436A9021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0d:85:47:18:4e:62:72:45:ca:20:a5:35:15:
                    2a:56:dc:d1:12:e8:6d:db:2c:9c:9b:a0:6f:c0:e9:
                    6f:84:4f:b1:76:96:29:b9:03:15:8a:60:1f:16:7f:
                    b3:e7:09:76:da:3d:cb:6c:a7:c6:05:f5:aa:98:81:
                    aa:7f:14:4d:e5:1f:bb:1a:59:16:68:01:70:d2:59:
                    36:eb:5e:45:0f:92:48:c9:fe:ce:bf:2d:63:a7:06:
                    05:6e:56:70:f7:a4:7e:97:38:d6:80:81:ad:a7:99:
                    0f:d2:cc:2c:23:b3:b7:dc:dc:e3:12:28:34:cb:6c:
                    64:84:23:b6:40:4b:c1:a8:7b:c2:84:8c:13:9f:2e:
                    9b:59:7a:eb:07:3a:c9:a8:94:99:10:b8:1f:ce:4e:
                    a3:43:15:82:e9:52:f1:e1:37:2e:bf:6f:10:d4:d5:
                    2b:58:fe:99:31:34:e2:60:2e:af:33:1e:ef:84:73:
                    61:74:5e:2f:4f:f3:30:b7:c9:7f:bb:a9:37:77:5a:
                    dc:c6:79:74:78:6a:07:8c:20:40:9a:cd:54:a5:94:
                    27:cf:3a:27:d5:6b:fe:3d:dd:86:87:ad:d1:de:18:
                    c4:9b:00:60:be:5b:4a:5c:52:4c:30:2d:bf:92:5c:
                    01:a0:81:ca:32:cd:13:b1:96:54:26:6b:63:d7:fd:
                    9d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:AD:44:30:E1:03:F5:84:B4:F3:8E:A4:C2:E1:78:8C:43:6A:90:21
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.4.0/22
                IPv6:
                  2804:64a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269438

    Signature Algorithm: sha256WithRSAEncryption
         83:9c:ab:43:25:5f:2a:2f:d3:bf:8e:18:03:f9:c1:2e:93:3b:
         b9:72:bf:a6:33:bf:a9:30:78:da:c2:34:23:b4:10:77:1d:74:
         32:6d:8a:2c:6c:f6:24:32:76:dd:fc:75:ea:e7:10:e8:c0:df:
         ff:ab:1a:00:ea:99:81:67:9d:f5:f1:e4:ed:2a:8c:5d:5d:17:
         b1:0e:bb:62:3a:d2:4f:4d:de:c9:c5:0b:e3:85:f8:17:6c:7c:
         4e:5a:fe:65:ed:b0:01:9c:74:e4:cf:34:a1:bc:b1:a5:4d:57:
         6f:85:44:73:eb:90:f6:7a:e6:66:61:86:83:ae:80:6b:91:5c:
         be:0e:86:d2:05:5d:94:8c:05:72:c5:28:0b:8b:09:04:83:51:
         2d:ef:19:7e:bb:37:d4:02:a9:9e:1d:13:a5:7d:a1:38:4c:30:
         d5:31:a1:95:53:37:8c:0d:82:73:ad:1d:b0:2e:b4:92:26:d2:
         66:e8:8c:9c:31:43:37:9c:9a:0f:8c:3b:28:05:13:2a:18:42:
         27:0f:e6:8e:3b:1e:16:e9:c6:d5:23:54:f2:a1:5e:c2:f1:0a:
         e5:ee:8b:4a:a7:97:c3:53:25:9c:26:42:96:84:3b:58:92:7b:
         d9:40:0e:25:61:e1:97:71:b2:50:02:ea:d6:2b:3f:1c:1c:67:
         34:2d:e3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:14:20 2025 by rpki-client